Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/daa5cf0e-4308-3203-a323-688325283479.roa
File: daa5cf0e-4308-3203-a323-688325283479.roa (raw, json)
Hash identifier: gq0rQPatnyAVOJ418Y0SyzUaAn1Pq045lERpzz8ha30=
Subject key identifier: 69:72:52:8D:30:86:3A:86:52:5A:7A:1B:2B:31:58:53:91:7E:B3:88
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848F1FD898A7CE544B5ECFEE980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/daa5cf0e-4308-3203-a323-688325283479.roa
Signing time: Thu 20 Feb 2025 12:27:33 +0000
ROA not before: Thu 20 Feb 2025 12:27:33 +0000
ROA not after: Wed 21 May 2025 11:27:33 +0000
asID: 18779
IP address blocks: 104.253.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f1:fd:89:8a:7c:e5:44:b5:ec:fe:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 20 12:27:33 2025 GMT
Not After : May 21 11:27:33 2025 GMT
Subject: CN=a9b6cac4-d559-4bdf-a62c-f36c7692b6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:86:a7:52:59:f5:39:d1:8e:8c:76:c0:fb:
9c:bb:2e:18:13:2a:e4:d7:db:d9:5b:a4:b8:ea:fd:
83:8e:bd:4b:12:fe:a5:60:c2:5f:55:3a:75:a0:f4:
40:7f:28:f1:53:d7:3f:83:cd:5b:65:89:d9:96:44:
2d:1a:5e:1f:a6:d8:a7:2f:2d:71:2d:32:93:4b:66:
37:6d:05:e6:53:e4:8f:92:fd:04:d1:a8:ad:cf:c1:
94:f3:e0:a2:b3:fd:75:9b:48:96:04:4a:db:81:8d:
44:09:8d:68:8f:67:c2:ac:55:5d:da:88:7c:be:ea:
e3:2a:d7:f1:8a:b9:51:87:e6:3b:81:fd:f4:fe:87:
90:74:72:ac:b3:b5:c9:8f:71:68:f7:a9:96:3c:7b:
2f:b3:e1:63:15:c4:b0:66:b5:26:04:92:e7:ad:db:
19:0a:22:f9:32:3a:29:9e:0a:36:a4:9a:1d:57:bf:
35:1a:2b:c3:e3:09:f7:bf:c7:d2:2d:cd:0b:79:91:
5e:af:1b:d2:20:a9:4a:77:f1:50:72:2e:e3:94:b9:
d3:66:1c:7a:47:97:86:25:82:ac:c8:b5:55:f9:e7:
f3:eb:5f:1b:2b:04:68:1f:1e:a0:b4:c6:7e:83:a0:
e2:c8:31:6c:bb:a5:10:e0:e9:89:78:00:d9:c8:6e:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:72:52:8D:30:86:3A:86:52:5A:7A:1B:2B:31:58:53:91:7E:B3:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/daa5cf0e-4308-3203-a323-688325283479.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:66:87:1f:29:ce:38:9d:34:34:39:ca:bf:81:4c:a6:14:87:
7b:21:3b:89:d7:45:64:51:51:7e:36:9f:03:02:8e:7b:2c:53:
09:21:99:8c:4f:4d:5c:a1:c4:c3:5d:9d:d6:12:5a:24:40:15:
95:b3:4d:b9:8d:8c:60:80:a8:e9:65:0e:9f:ec:bc:2b:42:7b:
ea:5a:92:49:c7:4c:d6:21:8f:b3:aa:53:2d:b0:ff:1b:81:68:
22:00:a6:42:04:42:99:71:13:72:2c:cd:56:fe:aa:f6:93:0e:
b9:66:43:d5:1c:6e:0a:8e:52:fd:b6:f1:dc:b4:a2:0b:a5:52:
00:27:1d:e2:95:48:ad:ed:c3:19:95:9d:0d:54:e1:f4:9f:81:
d3:51:14:f2:72:24:4d:f3:f9:9a:fb:41:bd:65:97:5c:5a:b9:
96:cd:3c:9c:87:63:32:ef:41:90:85:0b:75:ff:ab:0e:27:38:
bb:65:24:2c:31:ec:03:39:d7:69:d7:4d:4f:b0:62:ea:b4:6a:
c6:84:08:25:c6:49:6d:cf:04:85:4d:c7:7c:d0:b2:40:94:d4:
52:f9:0b:f8:40:24:f4:cd:83:a7:47:8f:26:dd:54:59:22:e5:
ba:fb:b7:cb:08:07:36:78:63:6f:a2:4f:ba:cf:ac:5e:57:db:
8d:fb:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:06 2025 by rpki-client